ExpressVPN is owned by Kape Technologies. That’s the factual answer. The more useful question is what that ownership tells us about the company’s incentives, strategic direction and the future of one of the world’s largest VPN providers.
Ownership alone doesn’t determine whether a privacy product is trustworthy. It doesn’t tell us whether a VPN keeps logs, whether its infrastructure is secure or whether its technical claims are accurate.
What ownership does provide is context.
It helps explain where a company allocates capital, how it approaches long-term product development and why its strategy evolves over time.
At Stack Privacy Research, we analyze privacy companies through the lenses of ownership, incentives and market direction, not just simple feature lists or marketing claims.
This article examines who owns ExpressVPN, how that ownership has evolved since the Kape Technologies acquisition, what has changed, what has remained consistent, and what all of that may mean for users deciding whether ExpressVPN still aligns with their own privacy requirements.
The short answer
If you’re looking for the direct corporate answer, it’s straightforward:
ExpressVPN is owned by Kape Technologies.
Kape acquired ExpressVPN in September 2021 for approximately $936 million, making it one of the largest acquisitions in the history of the consumer privacy market.
Today, ExpressVPN sits alongside Private Internet Access, CyberGhost and ZenMate within Kape’s portfolio of consumer privacy brands.
For many articles, that’s where the analysis ends.
For us, it’s where the interesting questions begin.
Because in a market built on trust, ownership isn’t simply a corporate detail.
It’s one of the clearest windows into a company’s incentives, strategic direction and the decisions that are likely to shape the product long after today’s feature list has changed.
Before looking at ownership
If all you’re trying to do is identify the company that owns ExpressVPN, the answer is relatively simple. If you’re trying to understand what that ownership means, the analysis becomes much more interesting.
Ownership doesn’t tell us whether a VPN is technically secure. It doesn’t prove whether a no-logs policy is genuine. It doesn’t verify the quality of a company’s encryption, infrastructure or engineering practices.
Those questions require different forms of evidence, such as independent security audits, technical documentation and long-term operational transparency.
What ownership does reveal are the incentives behind the business.
It provides context for understanding how a company allocates capital, prioritises product development and positions itself within an increasingly competitive privacy market.
Over time, those incentives influence the decisions that shape the product users ultimately experience. That’s why we believe ownership is one of the most valuable places to begin analysing any privacy company.
Not because it provides all the answers.
But because it helps explain why those answers often differ from one company to another.
Why ownership matters
One thing that became increasingly apparent during my time working in the consumer privacy industry was how rarely people looked beyond the product itself.
Most conversations focused on features.
- Server counts.
- Connection speeds.
- Pricing.
- Discounts.
Far fewer people stopped to ask a much simpler question: Who is making the decisions behind the product?
In most industries, that question rarely changes the buying decision. You probably don’t know who owns your supermarket, your washing-up liquid or your favourite coffee brand. If the product performs well, ownership often feels irrelevant.
Privacy software is different.
When you use a VPN, you aren’t removing trust from the equation. You’re relocating it. Your internet traffic passes through infrastructure operated by another organisation, making trust an essential part of the product itself.
That doesn’t mean ownership automatically determines whether a provider deserves that trust. It does mean ownership helps explain the incentives that influence how the product evolves over time. Those incentives eventually shape engineering priorities, product roadmaps, pricing strategies, acquisitions and long-term direction.
In a market where products continue to evolve, understanding those incentives can often be just as valuable as understanding the features themselves.
What is Kape Technologies?
ExpressVPN didn’t become part of Kape Technologies in isolation. It became part of a broader trend that has reshaped the consumer privacy market over the past decade: consolidation.
As the VPN industry matured, many well-known providers were acquired by larger groups looking to build portfolios of privacy and security products rather than individual standalone services.
Kape Technologies has been one of the most significant participants in that trend. Over a number of years, the company assembled a portfolio that includes CyberGhost, Private Internet Access, ZenMate and, following its 2021 acquisition, ExpressVPN.
Although each brand continues to operate with its own identity, products and customer base, they ultimately sit within the same corporate group. Long-term decisions around capital allocation, acquisitions and strategic direction are therefore made at the parent-company level.
That distinction matters.
From a user’s perspective, ExpressVPN remains ExpressVPN. From an ownership perspective, however, it has become one part of a much larger business with broader commercial objectives. That doesn’t automatically make the product better or worse. It simply changes the context in which future decisions are made.
In 2023, Kape itself was taken private by Unikmind Holdings, an investment vehicle associated with entrepreneur Teddy Sagi.
For most customers, that transaction had little visible impact on their day-to-day experience of using ExpressVPN. It did, however, change the company’s transparency profile.
- Public companies are required to disclose significantly more financial and governance information than privately held businesses.
- Private companies have far greater discretion over what they choose to publish.
That isn’t evidence of reduced trustworthiness. It’s simply a structural difference in how much information is available to investors, researchers and the public.
For us, the important question isn’t whether private ownership is inherently good or bad. It’s how that ownership structure influences the company’s incentives—and what those incentives suggest about where ExpressVPN is heading next.
What changed after the acquisition, and what didn’t
One of the biggest mistakes people make after a major acquisition is assuming that ownership immediately changes the product. In reality, acquisitions rarely work like that.
Some changes happen quickly. Some take years. And some of the most important parts of a business don’t change at all. That’s why we separate every acquisition into two distinct questions:
- What has demonstrably changed?
- What appears to have remained consistent?
Separating evidence from assumption is one of the simplest ways to avoid overreacting to headlines while still recognising genuine strategic change. Looking at ExpressVPN through that lens produces a far more balanced picture than either supporters or critics often present.
What appears to have remained consistent
Not every acquisition fundamentally changes the product. In ExpressVPN’s case, several of the technical privacy foundations that established its reputation appear to have remained intact following the Kape acquisition.
TrustedServer architecture
ExpressVPN’s TrustedServer infrastructure (a RAM-only server architecture designed to prevent connection logs from being written to physical storage) continues to underpin the service. Because servers are wiped on every reboot, the amount of persistent data that can exist is significantly reduced.
From both a technical and commercial perspective, maintaining TrustedServer makes sense. It remains one of ExpressVPN’s strongest trust signals and one of its clearest competitive differentiators.
Independent security audits
ExpressVPN has continued commissioning independent third-party audits following the acquisition. Firms including KPMG and Cure53 have reviewed elements of the company’s infrastructure, privacy controls, protocols and applications. That continued investment is notable. Independent verification isn’t simply a marketing exercise. For companies operating in trust-based markets, it becomes part of the product itself.
Transparency reporting
ExpressVPN also continues publishing transparency reports describing how it responds to legal requests and government demands. Those reports should always be understood alongside independent audits and publicly available technical documentation. Together, they form part of the broader evidence base used to evaluate the company’s privacy claims.
What has clearly changed
While many of ExpressVPN’s underlying technical foundations appear consistent, its strategic direction has evolved. The company is no longer positioning itself solely as a VPN provider. It is increasingly positioning itself as a broader consumer security platform.
Product expansion
Perhaps the most visible change has been the expansion beyond VPN services. ExpressVPN now includes products such as ExpressKeys, MailGuard and Identity Defender, extending the platform into password management, email protection and identity monitoring. These aren’t simply new ExpressVPN features.
They’re entirely new product categories.
Viewed through the ownership and incentive framework discussed earlier, this evolution is consistent with a company seeking to deepen customer relationships rather than relying on a single subscription product.
Subscription strategy
The introduction of Basic, Advanced and Pro subscription tiers reflects the same direction. Rather than selling one application, ExpressVPN is increasingly selling a broader security platform where additional products become part of the overall customer proposition.
Product experience
The user experience has evolved too. Upgrade prompts, feature discovery and cross-product recommendations now play a more prominent role inside the application. These changes don’t necessarily indicate that the VPN itself has become worse. They indicate that the company’s commercial priorities have expanded beyond a standalone VPN.
What this tells us
Taken together, the evidence points towards two conclusions:
- First: The technical foundations that originally established ExpressVPN’s reputation appear largely intact.
- Second: The company’s strategic direction has clearly evolved.
Those conclusions aren’t contradictory. In fact, they’re exactly what we’d expect from a successful product operating inside a larger corporate group. The acquisition didn’t fundamentally redefine what ExpressVPN is. It expanded what ExpressVPN is trying to become.
For users, the more useful question therefore isn’t whether ExpressVPN has changed. It’s whether that direction of travel still aligns with what they’re looking for today.
The capital allocation lens
One of the analytical habits we’ve borrowed from investment research is asking a simple question: Where is the company likely to allocate its next dollar?
Every business operates with finite resources. Every engineering team has limited time. Every product roadmap involves trade-offs. Capital allocation is simply the process of deciding where those resources are invested. That’s why we believe it’s one of the most useful ways to understand the future direction of any privacy company.
An independent business focused on a single product can devote most of its resources to improving that product. The strategic question is relatively straightforward: How do we build the best VPN possible?
A company operating within a broader security portfolio faces a different challenge. Its objective isn’t simply to improve one application. It’s to increase the value of an entire ecosystem.
In a mature VPN market, where standalone services have become increasingly competitive, one of the most common strategic responses is expansion.
- More products.
- More subscription tiers.
- More customer touchpoints.
- Higher lifetime customer value.
- The transition from a specialist VPN provider to a broader security platform.
None of that is inherently positive or negative. It’s simply the commercial reality of how many successful software companies evolve.
The important point is that different ownership structures often produce different incentives. A company optimising for the best standalone VPN will make different decisions from one optimising for an integrated portfolio of security products. Over time, those incentives begin to appear everywhere—from engineering priorities and product roadmaps to pricing models, user experience, marketing strategy, partnerships, and future acquisitions.
Viewed through that lens, ExpressVPN’s evolution becomes much easier to understand. Continued investment in TrustedServer, independent audits and transparency reporting reflects an ongoing commitment to preserving the trust that established the product’s reputation. At the same time, expansion into password management, identity protection and broader security services reflects a platform strategy designed to deepen customer relationships over time.
Those two objectives aren’t contradictory. One protects the foundation. The other expands the business.
The more useful question therefore isn’t whether ExpressVPN is changing. Every successful technology company changes. The more valuable question is: How are the company’s incentives influencing where those changes are taking it?
Does ownership matter for you?
The honest answer is: It depends on what you’re trying to optimise for.
One of the recurring themes throughout Stack Privacy Research is that very few privacy decisions have universal answers. The right choice depends on your requirements, your priorities and the type of relationship you want to have with the companies providing your digital security. Ownership is no different.
If your priority is everyday protection
If you’re primarily using a VPN to secure public Wi-Fi, reduce ISP visibility, protect your browsing activity or maintain reliable access while travelling, ownership is unlikely to be the deciding factor.
ExpressVPN continues to offer TrustedServer technology, the Lightway protocol, independent security audits and one of the largest global server networks in the industry. Based on the available evidence, the acquisition has not fundamentally altered the product’s ability to perform these core functions. For many users, that’s the outcome that matters most.
If you’re looking for a broader security platform
Your requirements may extend well beyond a VPN. Perhaps you’re also looking for password management, identity monitoring, email protection, and multiple security services under one subscription.
Viewed through that lens, ExpressVPN’s evolution makes strategic sense. Rather than remaining a standalone VPN provider, the company has expanded into adjacent security categories designed to increase both convenience and the overall value delivered to customers.
Whether that’s the right direction depends on what you’re trying to build. Some users will appreciate managing more of their digital security through a single provider. Others may conclude that a broader privacy ecosystem centred around encrypted email, cloud storage and productivity tools better reflects how they use technology today.
If you’re trying to minimise trust
This is where ownership becomes significantly more relevant. If your objective is to minimise the number of organisations you trust with your digital life, then understanding ownership, incentives and long-term strategy becomes an important part of the decision-making process.
A large, multi-brand security platform and an independent specialist VPN represent two very different approaches to solving the same problem. Neither approach is inherently superior. They’re simply optimising for different outcomes.
This helps explain why providers such as Mullvad and IVPN continue to appeal to privacy-focused users. Both companies have deliberately maintained a narrow product focus rather than expanding into broader security ecosystems. That philosophy is reflected throughout their products, from account creation and payment options through to product design and long-term strategic direction.
Ultimately, ownership only matters if it changes the things that matter to you. The clearer you are about your own requirements, the easier it becomes to decide whether ExpressVPN’s current direction aligns with where your own privacy journey is heading.
- Read more: ExpressVPN vs Mullvad: Convenience vs Discipline
- Read more: ExpressVPN vs IVPN: Mainstream Adoption vs Transparency & Independence
STACK view
Ownership doesn’t automatically make a privacy company better or worse. What it does provide is context. It helps explain why companies make the decisions they do, where they’re likely to invest next and how their products may evolve over time.
That’s why ownership sits at the centre of our research methodology. Features can be added in a software update. Pricing can change overnight. Marketing messages evolve. Ownership, and the incentives that flow from it, typically influence businesses for years.
Viewed through that lens, the ExpressVPN story is more nuanced than many of the headlines surrounding the acquisition suggest.
The available evidence indicates that the company’s technical foundations, including TrustedServer, independent security audits and transparency reporting, have remained largely consistent following its acquisition by Kape Technologies.
At the same time, ExpressVPN’s strategic direction has clearly evolved. The company is no longer positioning itself solely as a VPN provider. It is increasingly positioning itself as a broader consumer security platform, expanding into password management, identity protection and additional security services through tiered subscriptions and a wider product portfolio.
Neither of those observations is inherently positive or negative. They simply describe the direction of travel.
If you’re looking for an integrated security platform that combines VPN services with a growing suite of complementary products, ExpressVPN’s current strategy may be exactly what you’re looking for. If, however, your priority is a deliberately focused VPN from a company whose identity remains centred on privacy as its primary product, you may find yourself drawn towards providers such as Mullvad or IVPN, whose strategies have remained intentionally specialised.
Ultimately, we don’t believe ownership should be used to judge a company. We believe it should be used to understand it. Because once you understand a company’s incentives, its product decisions become far easier to interpret, not just today, but over the years that follow.
Continue your research
ExpressVPN research
- ExpressVPN review
- Is ExpressVPN safe?
- Is ExpressVPN private?
- ExpressVPN features
- Is ExpressVPN worth it?
- ExpressVPN alternatives
Ownership & strategy
- Why ownership matters in the VPN industry
- The evolution of the VPN market
- How to build a privacy stack
Compare ExpressVPN
- ExpressVPN vs Proton
- ExpressVPN vs Mullvad
- ExpressVPN vs IVPN
Editorial note
Stack Privacy Research may receive affiliate compensation if you purchase through links on this page. This never influences our editorial conclusions or research methodology.
Our analysis combines more than a decade of professional experience across digital products, consumer technology and online privacy, including five years working directly within the consumer privacy industry. This is complemented by hands-on product evaluation and independent research using publicly available evidence, technical documentation and corporate disclosures.
Where appropriate, we distinguish between verified facts, editorial analysis and informed opinion so readers can understand not only what we know, but how we reached our conclusions.